An enquiry is not a data licence.
We collect the information needed to assess and respond to your enquiry. Describe the opportunity without sending the underlying records.
Who is responsible
CEOBuySell is responsible for the enquiry information collected through this website. Contact the desk at [email protected] for privacy questions or to exercise your rights. This notice applies to website enquiries; it does not authorise the supply or licensing of an underlying business dataset.
What we collect
We collect the contact and organisation details you provide, descriptions of records or buyer requirements, qualification answers, and your contact permission and required acknowledgements. We store the submission time, reference, privacy-notice version and review status. We do not provide file uploads or ask for customer records, employee information, confidential documents or credentials.
Why and on what basis
We use enquiry information to assess fit, respond, arrange discussions, manage potential engagements and protect the service. We rely on legitimate interests in handling business enquiries and maintaining service security, and take steps at your request before a contract where that basis applies. The form records permission to respond; it does not grant a dataset licence or create a marketing subscription. We do not sell enquiry details or use the form contents to train AI models.
Who can access it
Authorised CEOBuySell account administrators and the licensing desk can review enquiries. Cloudflare hosts and processes website and database information and provides transactional email infrastructure; email providers handle delivery to the desk and your address. We do not publish enquiries or automatically circulate them to potential buyers. Any proposed introduction or disclosure of business descriptions is scoped with you first.
Technical information
The hosting provider processes request and connection information to deliver and secure the service. The form endpoint uses a short-lived hash derived from the request IP address and an hourly time window to limit abuse; the application does not store the raw address in its enquiry tables. Expired rate-limit entries are removed during request handling and scheduled maintenance. Operational logs record error events and enquiry references rather than form contents. This site does not run advertising pixels or a marketing mailing list.
Retention
Unconverted enquiries are normally removed within 12 months of receipt. Continuing discussions and qualified engagements may be retained longer where needed to manage the relationship, meet legal duties or establish and defend claims. We review these records on request and as engagements close. Transactional delivery records follow the associated enquiry. Provider logs and backups follow the provider’s retention arrangements.
International processing
Cloudflare and email providers may process information outside the UK. Where a restricted transfer of personal information occurs, the applicable adequacy decision or contractual transfer safeguards must cover it. Hosting in a particular region does not guarantee that all support, email or operational processing stays in that region.
Your choices and rights
You may ask to access, correct or erase your personal information, restrict processing, or object to processing based on legitimate interests, subject to applicable exceptions. You may withdraw permission to be contacted; that does not undo lawful processing already carried out or remove records we must retain. Where applicable, portability rights also apply. Contact [email protected]. You may complain to the UK Information Commissioner’s Office at ico.org.uk.
Future dataset engagements
Licensing a dataset is a separate activity. Before source data is accessed or supplied, the parties must establish processing purposes, roles, lawful arrangements, relevant notices, security, retention, transfers and permitted recipient uses. AI training, evaluation and research must be addressed explicitly where proposed. A company’s permission does not automatically resolve the rights of individuals or other content owners.